CVE-2019-11605: Infoleak
An issue was discovered in GitLab Community and Enterprise Edition 11.8.x before 11.8.10, 11.9.x before 11.9.11, and 11.10.x before 11.10.3. It allows Information Disclosure. A small number of GitLab API endpoints would disclose project information when using a readuser scoped token.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-11605?
CVE-2019-11605 is classified as a medium severity vulnerability due to its potential for information disclosure.
How do I fix CVE-2019-11605?
To fix CVE-2019-11605, upgrade your GitLab installation to version 11.8.10, 11.9.11, or 11.10.3 or later.
What types of GitLab versions are affected by CVE-2019-11605?
CVE-2019-11605 affects GitLab Community and Enterprise Editions versions prior to 11.8.10, 11.9.11, and 11.10.3.
What kind of information is disclosed in CVE-2019-11605?
CVE-2019-11605 discloses project information through certain GitLab API endpoints when using a read_user scoped token.
Is my GitLab installation vulnerable to CVE-2019-11605?
If you are using GitLab versions prior to 11.8.10, 11.9.11, or 11.10.3, your installation is vulnerable to CVE-2019-11605.